Review the following configuration.

Understanding the Configuration:

The command aaa authentication login default radius local specifies that the switch will attempt RADIUS authentication first. If the RADIUS server is unavailable, it will fallback to the local username/password.

If the RADIUS server is operational, the local credentials will not be accepted, even over the console port.

Why Can't the Technician Log In?

The local username/password will only work if the RADIUS server is unreachable. In this scenario, the RADIUS server is functional, so the switch continues to authenticate through it and does not fall back to the local credentials.

This behavior is by design, as dictated by the configuration.

Solution:

If access to the console port using local credentials is a critical requirement, consider adjusting the configuration to prioritize local credentials. For example, use:

aaa authentication login default local radius

This configuration ensures that local credentials are tried first, with RADIUS as a secondary option.

References:

ICX Switch Command Reference Guide (AAA Configuration Section): RUCKUS Support